Each purchaser must maintain his PFCG role?

hi expert
  we use SRM 7.0.
  our organazion strcture include 30 company code , and each of the companies has its purchasing org. There are 4 or 5 purchasing group for one purchasing org.
  If there is not org. level. restriction in PFCG role, the purchaser can edit all companies'  RFx, PO, Contract. It is unreasonable.
  1 must I create  PFCG role with Org . Level for every purchaser?
  2 we need a user who can check all the SC , how to accomplish it?
  regards
    claud

1 must I create PFCG role with Org . Level for every purchaser?
Create one role per purchasing org with specific "Responsible Purchasing Organization" (BBP_PURORG) field value. Then assign the users to the role corresponding to his/her purchasing org.
2 we need a user who can check all the SC , how to accomplish it?
User who is assigned the role of SRM Administrator should be able to monitor all shopping carts through portal: "SRM Administration" >> "Application Monitor" >> "Shopping Cart Monitor".

Similar Messages

  • Business Role - Link to PFCG role

    Dear all,
    When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
    What is the functionality of this PFCG role in relation to the Business Role?
    When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
    Is there some documentation available that explain this relationship between the PFCG role and the business role.
    Thank you in advance,

    Dear Ivan,
    To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
    Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
    CRM Business Partner Roles:
    http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
    Rights and responsibilities that a business partner can have in various business transactions.
    The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
    http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
    Each business partner role contains a predefined set of functions based on the business partner’s relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
    PFCG Roles:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
    The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
    To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
    Hope this will help.
    Regards,
    Naveen.

  • Maintaining WebUI Business Roles in PFCG/Infotype 1263

    Hello there,
    we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
    As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
    Does anyone have an idea? Or have tried this before?
    Thanks and regards,
    Jodi
    Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM

    Hi Jodi / Ghayss,
    I think you should be interested in the business role determination logic:
    The system finds the business role in the following sequence:
    1. check if there is any business role assignment in SU3
    2. check if there is any business role assigned in the organizational hierarchy
    3. check whether the pfcg role assigned to the user is asscociated to any business role
    So basically what you need to do is:
    1. assign the PFCG role to the business role
    2. assign the PFCG role to user in su01
    Then the system will find the business role accordingly.
    Cheers,
    David Wang

  • Multiple PFCG Roles to a user and one business role

    Hello SAP CRM Experts,
    we are facing a problem then I need your help.
    The external user can access the CRM through three distinct business roles.
    However, for each of these business roles, there are specific access
    rules configured in three different PFCG profiles.
    In the registration of the user (SU01), are assigned the three profiles
    PFCG because the user must have access to three different business roles.
    However, for one of the profiles the ability to modify the document
    service order is blocked and for the other is allowed to modify this
    document.
    Is there a customizing where I can associate the PFCG role to the
    business role, and then, when the user logs into the system, it
    identified the business role that he accessed the PFCG profile associated.
    However, this configuration is not working, and did not solve the problem.
    It seems to me that there is a merge of all the permissions that the user
    has, and is not being considered the PFCG role associated with the
    specific business role.
    This is really correct? The merge permissions occurs?
    Best regards,
    Diogo Lupinari

    Yes, thatu2019s correct.  When user is assigned multiple PFCG roles, all authorizations are in play.

  • 1 Business Role  = 1 PFCG role

    Hi,
    We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
    How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single  PFCG role?
    Regards,
    Nikhil

    Nikhil,
    The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
    Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
    Hope this helps.
    Amar.

  • Assignment pfcg-role to user and assignment pfcg-role to business role

    Hello, Gurus!
    What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
    As  I see authrizations from pfcg-role assigned to business role have no effect to user...
    Best regards,
    Artuк Litvinov.

    Artur,
    The business role assignment does not give a user that PFCG role.  Instead it is just a mapping table and does nothing more. 
    Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient.  In your scenario let's do the following:
    You have pfcg roles:
    RA
    RB
    You a have business role
    B1
    You have users:
    Joe
    Jack
    Business Role B1 is assigned to role RA which contains UIU_COMP.
    User Joe gets business role B1 and roles RB which does not have UIU_COMP.  This will not let him use the webclient.
    User Jack gets business role B1 and pfcg role RA.  This will work because everything is there.
    This means you need both the correct PFCG plus business role setup to make it work properly.
    Take care,
    Stephen

  • Restrict creation of BP based on PFCG role

    Hi Experts,
    We are implementing CRM 7.0. In the IC AGENT business role we would like to restrict the user to only create contacts using the PFCG role SAP_CRM_UIU_IC_AGENT. We tried using authorisation object B_BUPA_RLT and  CRM_BPROLE. But it did not work. Do you know if we are missing anything else? FYI..We are not using ACE.
    Best regards,
    David

    In our system we had a similar problem but with Accounts or Prospects creation. This is how we resolved it: In CRM 7.0 each Customer/ Prospect BP Record has a field Employee responsible on it. This is set automatically on the BP creation page, if the User ID of the user creation the record is assigned to an Employee record.  If the user does not have access to create Employee relationships (BUR011) it will fail to complete the customer creation process. Authorization Object B_BUPR_BZT (Business Partner Relationships: Relationship Categories) controls this. You will need to add BUR011 to u201CRELTYP_fromu201D

  • Pfcg roles behind ic webclient profiles

    Hi,
    Can anybody tell what are PFCG roles behind for each IC Webclient profiles like SALES B2B, SALES B2C, SERVICE.... (tx: crmc_ic_main)
    thanks
    Tim

    Hi Tim,
    Again, PFCG roles are a combination of authorisations, that define what the person linked to the role can do.
    e.g. An authorisation is defined that th role can create/change/read sales orders. Within the same role there is an authorisation that indicates that the role cannot create Service Contracts. and so on...
    These are standard authorisations that are used by the system.
    Hope this is clear now.
    ps. Don't forget to reward points if the answers are usefull and when you question is answered reward points and put the question to answered.
    Kind regards,
    Micha

  • ERM "Unhandled error; type conflict" when clicking Maintain in PFCG button.

    I am testing my installation of GRC and when creating a role in ERM with the role designer I click the "Maintain in PFCG" and am receiving an error:
    Unhandled error; Type conflict when calling a function module (field length).
    I have been doing some searching but have been unable to find a solution for this. I have implemented the items found in SAP Note 1291501 regarding security.
    Does anyone have suggestions on what the solution of this problem is or what I can do to troubleshoot this issue more?

    Hi Michael,
    Can you please share your other details like: What is the GRC AC version you are trying to test and the patch level of ERM and RAR. Try to check the System logs in the Configuration section. Check st22 suggested by Julius and also sm21 in the backend system for system logs . I hope you'll get some hint out of that.
    Regards,
    Gurugobinda

  • How do I consolidate a song into an album, each purchased separately, in my iTunes library? iMac OSX 10.8.5. iTunes Help has been no help.

    How do I consolidate a song into an album, each purchased separately, in my iTunes library? iMac OS X 10.8.5. iTunes Help has been no help.

    However, my troubleshooting issue is that I also want the songs in my concert playlists to go in order of how they were performed at the concerts.
    Give them a track number.
    Each time I number them within the playlists the song's number also changes within the Library Music list.
    And?  I'm not seeing the problem.
    However, I can not figure out how to make true copy. I've already tried dragging the song to my desktop, then dragging the new copy back into iTunes. I've even tried renaming the duplicate copy and dragging it into iTunes. Why won't my iTunes make an individual duplicate copy of a song?
    How do you have iTunes manage your music?  If you drag a song to the desktop it may just be moving the file to the desktop.
    Command+R to reveal the file in Finder.  Command+D to duplicate the file in Finder. Drag the duplicate to iTunes to add the second copy.  Not that I totally understand where the issues lie and feel this is likely not the best remedy...

  • How do I share in the music and apps that my children have purchased, but maintain my own identity?

    How do I share in the music and apps that my children have purchased, but maintain my own identity?

    You don't. Everythng downloaded with one Apple ID can not be transfered to another Apple ID. So you would need to buy it a second time. This is one of the Pit Falls of the whole Download only model.
    That is why I refuse to buy things like music or movies that are tied to a specific User Name, ID.

  • Business Role and PFCG Role

    Hi all,
        I am new to CRM 7.0 Can someone explain  What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
       And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
    Thanks.
    Neha.

    Neha,
    Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely.  I'm locking this thread due to it fact that this question has been asked many times before by many different people.
    These threads explain the topic in more detail:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    Thank you,
    Stephen

  • Purchase Order Maintainer is unable to generate reminder / urging message

    Hi all,
    Purchase Order Maintainer is unable to generate reminder / urging message for purchase order.
    In material mater reminder time is set as well in vendor master partner function is set.
    But in ME91F message is coming like "Not possible to generate urging messages for all documents"
    regards,
    Nitin Patil

    Hi,
    The PO output should have been successfully processed before the urgig message to trigger.
    The order generally is
    PO output, urging and then reminders

  • Printing Terms and Conditions for each Purchase order in the RDF output

    Hi All,
    Present i have an RDF report with the registered concurrent program. when i run this concurrent program i am getting the terms and conditions at the end of the purchase orders only once(for example 10 purchase orders). Now the requirement is to get this terms and conditions printed for each purchase order. The output is in PDF format. It's an 11i RDF report. Can any one suggest me the methods how to do this? Please give me reply as soon as possible.
    Thankyou in advance
    Regards,
    Polimera

    Hi, Polimera
    Welcome to OTN
    Present i have an RDF report with the registered concurrent program. when i run this concurrent program i am getting the terms and conditions at the end of the purchase orders only once(for example 10 purchase orders). Now the requirement is to get this terms and conditions printed for each purchase order. The output is in PDF format. It's an 11i RDF report. Can any one suggest me the methods how to do this? Please give me reply as soon as possible.
    Take a fixed frame inside the purchase order master repeating frame and place your terms and condition inside the fixed frame.
    Hope this helps
    If someone response is helpful or correct, please mark is accordingly

  • BAPI or Function Module to change PFCG role of an User from Background

    Hello Experts,
    I have a requirement to change PFCG role assigned in User from background and I need a BAPI , FM or any other method to do the same, I have gone through BAPI_BUPA_ROLE_REMOVE and BAPI_BUPA_ROLE_ADD_2 but as per my understanding , these are related to business role not PFCG.
    Please help!!!
    regards,
    Arnab.

    Resolved by myself.
    regards.
    arnab

Maybe you are looking for